[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Son-of-IKE Performance

To: Eric Rescorla <ekr@rtfm.com>
Subject: Re: Son-of-IKE Performance
From: Bill Sommerfeld <sommerfeld@east.sun.com>
Date: Wed, 05 Dec 2001 19:03:44 -0500
cc: ipsec@lists.tislabs.com
In-Reply-To: Your message of "Wed, 05 Dec 2001 14:33:11 PST." <200112052233.fB5MXB571034@romeo.rtfm.com>
Reply-to: sommerfeld@east.sun.com
Sender: owner-ipsec@lists.tislabs.com

I'd like to see a little more detail on the real impact of the key
exchange on end-to-end latency.  

For a very simple example, assume that I want to ping a peer; my
policy says "use transport mode", and no SA's are currently active.
How much additional latency did we add to the connection setup?

At what point in each exchange can the initiator set up its outbound
SA?  Its inbound SA?  Likewise for the responder.

					- Bill

Follow-Ups:

Re: Son-of-IKE Performance

From: Eric Rescorla <ekr@rtfm.com>

References:

Son-of-IKE Performance

From: Eric Rescorla <ekr@rtfm.com>

Prev by Date: Re: Son-of-IKE Performance
Next by Date: discussion of SIGMA-IKE
Prev by thread: Re: Son-of-IKE Performance
Next by thread: Re: Son-of-IKE Performance
Index(es):
- Main
- Thread